Advisories · Technology

denis-de-bernardy Auto Thickbox.

Every CVE that names denis-de-bernardy Auto Thickbox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-2537 CVE record

CVSS 6.4 Medium

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library
- YouTube Embed, Playlist and Popup by WpDevArt
- denis-de-bernardy Auto Thickbox
- Cross-site scripting (XSS)
Not analysed yet 3 Jul 2025